Disconnected from malicious site..

Hi malware fighters,

Avast disconnected me trying to go here: wXw.neithercorp.us/npress/%3Fp%3D209
HTML:Scipt-inf was flagged…
Of the 74 pages we tested on the site over the past 90 days, 18 pages resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-07-15, and the last time suspicious content was found on this site was on 2010-07-15.

Malicious software includes 11 scripting exploits, 8 exploits. Successful infection resulted in an average of 1 new process on the target machine.

Malicious software is hosted on 4 domains, including mattjackson1.com/, lillimaids.com/, blakeandmuresan.com/.

1 domain appear to be functioning as intermediaries for distributing malware to visitors of this site, including mattjackson1.com/.

This site was hosted on 1 network(s) including AS26496 (PAH).

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message,

The malware is in the sublink: htxp://lillimaids.com/bkup/sendsresults.php on mentioned page - page code contains malicious code…

polonus

Hi malware fighters,

A bit further digging on this link:
The connection to htxp://lillimaids.com/bkup/sendsresults.php
is interrupted by the avast Network Shield
in malzilla I see a GET /bkup/sendsresults.php HTTP/1.0
See info here: http://www.malwareurl.com/listing.php?domain=lillimaids.com
verdict: Compromised website / Directs to Exploits

polonus